Crypto Tech Provider Haruko Hit by Cyberattack, Client Assets Stolen

Crypto tech provider Haruko has suffered a cyberattack that affected 15 clients and resulted in the theft of digital assets after attackers compromised credentials stored in a third-party password manager.

The attack did not directly breach Haruko’s core platform. Instead, the attackers used stolen credentials to gain access to client environments, showing how a compromise at an external service can create a path into connected cryptocurrency systems.

What Happened to Haruko?

Haruko detected suspicious activity involving several client environments and began investigating the incident. The company brought in external cybersecurity specialists to determine how the attackers had gained access and how widely the breach had spread.

The investigation traced the initial compromise to a third-party password manager used to store credentials. Attackers were able to obtain credentials from the service and later use them against Haruko client environments.

The incident affected 15 clients and led to the theft of digital assets.

Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise

How Did Hackers Get Access?

The attackers did not need to directly break into Haruko’s main platform. Instead, they compromised the external password-management service and obtained credentials that could be used to access connected environments.